Associate Security Analyst

Public Sector Resourcing, managed by AMS; Greater London; On-site; GBP 83,000 - 111,000; Full time

Job summary

The Cabinet Office is seeking an Associate Security Analyst X2 for a 6-month contract based in London with hybrid working, 3 days per week. Candidates must hold active SC clearance and be eligible for Inside IR35. The role involves triaging and investigating cyber security alerts, supporting containment, eradication and recovery actions, and collaborating with other Cyber Defence functions.

London-based hybrid role with potential for rapid onboarding. This position is restricted to the UK.

Qualifications

• Experience in cyber security analysis and incident response.
• Ability to investigate security alerts and understand incidents.

Responsibilities

• Triage and investigate cyber security alerts and reports from users
• Use techniques to analyse systems, files, network traffic and cloud environments to understand cyber incidents
• Support the technical response to cyber incidents with containment, eradication and recovery actions
• Support the coordination of cyber incidents
• Contribute to post-incident reviews and lessons learned
• Identify opportunities for continual improvements to incident investigation and response
• Work with Cyber Defence functions to improve wider capabilities
• Contribute to internal plans, playbooks and knowledge base articles
• Act as escalation point and mentor to apprentice security analysts

Skills

Cyber security analysis

Incident response

Threat detection

Tools

SPLUNK

M365

Entra Azure

Job description

On behalf of the Cabinet Office, we are looking for a Associate Security Analyst X2 (Inside IR35) for a 6 Month contract based Hybrid in the London office 3 days per week.

The Cabinet Office supports the Prime Minister and ensures the effective running of government. The Cabinet Office is also the corporate headquarters for the government, in partnership with HM Treasury, and takes the lead in certain critical policy areas. More information about the Cabinet Office can be found on its website at: www.gov.uk/government/organisations/cabinet-office

SC Clearance is an essential requirement for this role, as a minimum you must be willing & eligible to undergo checks. Please note, due to the exceptional requirements of this position (short-term nature of this role and speed at which we require a postholder in situ) preference may be given to candidates who meet all of the essential criteria and hold active security clearance.

Responsibilities

• Triage and investigate cyber security alerts and reports from users


• Use a variety of techniques to analyse systems, files, network traffic and cloud environments and understand the nature and extent of possible cyber incidents


• Support the technical response to cyber incidents by identifying and implementing (or supporting the implementation of) containment, eradication and recovery actions


• Support the coordination of cyber incidents


• Contribute to post-incident reviews to identify lessons and actions


• Identify opportunities for, and support the delivery of, continual improvements to the incident investigation and response capability


• Work closely alongside other Cyber Defence functions, supporting the continual improvement of wider capabilities


• Contribute to internal plans, playbooks and knowledge base articles


• Act as an escalation point for, and provide coaching and mentoring to, apprentice security analysts

Essential

• Experience working with SPLUNK


• Experience within M365 is essential


• Entra Azure experience


• Active Security Clearance (SC) is required for this position

Please be aware that this role can only be worked within the UK and not Overseas.

Disability Confident

As a member of the Disability Confident Scheme, The Cabinet Office guarantees to interview all candidates who have a disability and who meet all the essential criteria for the vacancy. In cases where we have a high volume of candidates who have a disability who meet all the essential criteria, we will interview the best candidates from within that group. This scheme encourages candidates with a disability and/or neurodivergence to apply. In exceptional circumstances, we may also need to apply the desirable criteria in our shortlisting process which may include holding active security clearance.

Armed Forces Covenant

The Cabinet Office guarantees to interview veterans or spouses / partners of military personnel who meet all the essential criteria for the vacancy. In cases where we have a high volume of ex-military candidates / military spouses or partners, who meet all of the essential criteria, we will interview the best candidates from within that group. In exceptional circumstances, we may also need to apply the desirable criteria in our shortlisting process which may include holding active security clearance.

In applying for this role, you acknowledge the following \"this role falls in scope of the Off Payroll Working in the Public Sector legislation. Any rates of payment quoted will reflect the gross rate per day for the assignment and will be subject to appropriate taxes and statutory costs. As such the payment to the intermediary and your income resulting from this contract will be different\".

References

Visible links

1. https://www.gov.uk/government/organisations/cabinet-office